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Amendments to the Claims: 

This listing of claims will replace all prior versions and listings of claims in the application. 

Claims 1-16 are amended. 
Claims 17 and 18 are new. 

Listing of Claims: 

L (Currently Amended) A key distribution method applied in the Next Generation Network 
comprising a terminal, a soft switch and an authentication center, compri$ing-step*H*f: 

a)-the terminal sending a registration request message to the soft switch for a 
registration; 

fe^the soft switch sending the authentication request message to the authentication 
center for the authentication for the terminal; and 

e)-the authentication center authenticating the terminal, generating a session key for the 
terminal and the soft switch, and upon a successful registration authentication, sending the 
session key to the soft switch so as to be distributed to the terminal. 



2. (Currently Amended) The key distribution method according to claim 1 , wherein ia-the_step 
efeof the authentication center a ithonticrite fi authenticating the terminal titeo^comprises^t^s 
ef: 

e±)~the authentication center generating a first verification word for the terminal 
according to a key Kc shared with the terminal, encrypting the session key with the shared key 
Kc, and returning the encrypted session key and the first verification word to the soft switch; 

0 2) the soft switch returning a registration failure response message to the terminal to 
notify the terminal of a registration failure; 

<£}-the terminal generating a second verification word according to the key Kc shared 
with the authentication center, and sending a registration message containing the second 
verification word to the soft switch for a registration again; and 

e4)-the soft switch authenticating the terminal according to the first verification word 
and the second verification word. 



2 



PAGE 3(13 * RCVD AT 2/23/2007 4:09:59 PM [Eastern Standard Time] * SVR:USPT0-EFXRF-1/12 * DNIS;2738300 * CSID:6123329081 * DURATION (mm-ss):04-56 



FEB-23-07 03:06PM FROM-Merchant & Gould 6123329081 T-220. P. 004/013 F-04T 

Preliminary Amendment filed Fehtuary 23, 2007 

3 (Currently Amended) The key distribution method according to claim 2, wherein i*-tiae.step 
e^of the soft switch 4k^b«te sdistributing the session key to the terminal fe^«^comErises 
st ops o f: 

the soft switch returning to the terminal a registration success response message 
containing the session key encrypted with the shared key Kc> and sending a terminal 
authentication success message to the authentication center; and 

e6>-tbe terminal decrypting the session key encrypted by the authentication center 
according to the shared key Kc. 



4. (Currently Amended) The key distribution method according to claim 3, wherein the method 
further comprises- steps of : 

the terminal sending to the soft switch a list of security mechanisms supported by the 
terminal and priority information of each security mechanism; 

the soft switch choosing an appropriate security mechanism for communication 
according to the list of security mechanisms and the priority information of each security 



j mechanism of the terminal. 



5. (Currently Amended) The key distribution method according to any one of claims 1 4 claim_L 

wherein the registration request message and the registration message are SIP protocol 
registration messages, the registration failure response message is a SIP protocol response j>* 
message, and the registration success response message is a SIP protocol registration request 
success messagerioi 

wherein the registration request message is a sys tem restart message and a ^ 
corresponding response message in the MGCP protocol, the r egistration failure response 
message and the registration success response message are a notific ation request message and a 
corresponding response message in the MGCP protocol- and the registration message comprises 



D 



j a notification message and a corresponding response message in the MGCP protocol; or 

I wherein the registration request message comprises a system serv ice status change ^£ 

message and a corresponding response message in the H .248 protocol, the registration failure f 

response message and the registration success response message a re an attribute modification tp 

message and a corresponding response message in the H.248 prot ocol, and the registration G/ 

! message comprises a notification message and a correspond ing response message in the H.248 

j protocol; or 
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wherein the reflation requ e st message is a gatekeeper request message in the H.323 
protocol the rerisliat i™ f*Hnre tftsnor.se message is a gatekeeper rejection message in the H.323 
,w,-,rn1 the re gistration message is a re g islration request message in the H.323 protocol, and the 
^p^tinn success re s]™™* message is a registration success message in the H.323 protocol. 



6. (Currently Amended) The key distribution method according to n n y nnn n f nl nimi 1 4 T Haim 
2, 

wherein the registration request message and the r egistration message are SIP protocol 
registration m^saoes. the re t riftttfltinn failure tesponse message is a SIP protocol response 
message, and the registration success re sponse message is a SIP protocol registration request 
success message: or 

wherein the registration request message is a system restart message and a 
corresponding response message in the MGCP protocol, the registration Suture response 
message and the registration success response message are a notification request message and a 
corresponding response message in the MGCP protocol, and the registration message comprises 
a notification message and a corresponding response message in the MGCP protocolrL2£ 

wherein the registration request message comprises a syste m service status change 
message and a corresponding response message i n the HJ248 protocol, the registration failure 
response message and the registration success resp onse message are an attribute modification 
message and fl corres ponding response message in th e H.248 protocol, and the registration 
message co m prises a notification message and a correspondin g response message in the H.248 
protocol: or 

wherein th e re gistration request message is a g a tekeeper request message in the H.323 protocol, 
the re gistration failure response message is a gat e keeper rejection message in the H.323 protocol, ">» 
the registration message is a registration request message in the H.323 protocol, and the £1. 
registration success response message is a registration success message in the H.323 protocol. ^ 

o 

7 (Currently Amended) The key distribution method according to any one of claimo 1 A, claim 

3^ O 

wherein the registration request message and the registratio n message are SIP protocol Q 

registration messages, the registration failure response mes sage is a SIP protocol response J> 

message, and the registration success response message is a SIP p rotocol registration request ^£ 

success message; or "Jjj 

wherein the re gistration request message is a sy stem restart message and a £g 
^TT-ggprmriiTio response message in the MGCP protocol, the re gistration failure response ^ 
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mess agg ™A the registration success response messa ge are a notification request message and a 

message ir S MGCP BEfe* ^ * p repis *»*° n m< ™ 6 
o ^rifi^tinn message an d a correspondin g response message in The MGCP protocol; or 

wherein the registration request message comprises a system service status change 
message and a corresponding response message in the H.248 protocol, the registration failure 
response message and the registration success response message are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration 
message comprises a notification message and a corresponding response message m the H.248 
protocol-rior 

wherein the registration request message is a gat e keeper request message in the H.323 
pmtncol. the registration failure response mess a ge is a gatekeeper rejection message in the H.3 23 
prntncoL the registration message is a registration request message in the H.323 protocol, and the 
r ^an-ation success response message is a regi s tration success message in the H.323 protocol. 



8. (Currently Amended) The key distribution method according to my o n e of clnmr, 1 c jajm.4, 

wherein the registration request message an d the registration message are SIP protocol 
re gistration messages, the registration failure resp onse message is a SIP protocol response 
message, and the registration success response message is a SI P protocol registration request 
success message; or 

wherein the registration request message is a system restart message and a 
corresponding response message in the MGCP proto col, the registration failure response 
message and the registration success response m essage are a notification request message and a 
corresponding response message in the MGCP protoco l, and the registration message comprises 
a notification message and a corresponding response mess age in the MGCP protocol; or 

wherein the registration request message compri ses a system service status change 
message and a corresponding response message in the H.248 protoc ol, the registration failure 
response message and the registration success response me ssage are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration Q 
message comprises a notification message and a correspon ding response message in the H.248 
protocol; or 

wherein the registration request message is a gatekeeper request message in the H.323 
protocol, the registration failure response message is a gatekeeper rejection message in the H.323 _ 
protocol, the registration message is a registration request message in the H.323 protocol, and the 
registration success response message is a registration success message in the H.323 protocol. Q 

"to 
<D 
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9 (Currently Amended) A key distribution method applied in the Next Generation Network 
comprising a terminal, a signaling proxy, a soft switch and an authentication center, compnsmg 
s tops of : 

afthe terminal sending a registration request message through the signaling proxy to 
the soft switch for a registration; 

b^the soft switch sending the authentication request message to the authentication 
center for the authentication for the terminal; and 

eVthe authentication center authenticating the terminal, generating a session key for the 
terminal and the signaling proxy, and upon a successful registration authentication, sending the 
session key to the soft switch so as to be distributed through the signaling proxy to the terminal. 



10. (Currently Amended) The key distribution method according to claim 9, wherein ifi-thestep 
e)£f the authentication center .nith e ntioates authenticatmg the terminal feoug k c ompris _ es- steps 

e4>the authentication center generating a first verification word for the terminal 
according to a key Kc shared with the terminal and a key Ksp shared with the signaling proxy, 
encrypting the session key respectively with the shared key Kc and the shared key Ksp, and 
returning the encrypted session key and the first verification word to the soft switch; 

c 3) -the soft switch returning a registration failure response message through the 
signaling proxy to the terminal to notify the terminal of a registration failure; 

e3fthe tenninal generating a second verification word according to the key Kc shared 
with the authentication center, and sending a registration message containing the second 
verification word to the signaling proxy to be forwarded to the soft switch for a registration 
again; and 

e4)-the soft switch authenticating the terminal according to the first verification word 
and the second verification word. 



1 1 . (Currently Amended) The key distribution method according to claim 10, wherein Mhe_step 
^of the soft switch 4i s^but e s distributing the session key to the terminal throughcompri ses 

tJtcpavjC, 

g§)— the soft switch forwarding to the signaling proxy a terminal registration success 
response message containing the session key encrypted by the authentication center respectively 
with the shared keys Kc and Ksp, and the signaling proxy decrypting with the shared key Ksp the 
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session key encrypted by the authentication center with the shared key Ksp, calculating a 
message verification word for the registration success response message with the decrypted 
session key, and forwarding to the terminal the registration success response message containing 
the message verification word and the session key encrypted with the shared key Kc; and 

Q6) the terminal decrypting the se s sion key encrypted by the authentication center 
wording to the shared kev and anthentic atin p with the decrypted session key the message 
^Tthentication wr,rd of the mes.« « p« returned from the signaling proxy so as to authenticate an 
identity of the sipping proxy, a" inte grity of the message and whether security mechanism 
parameters of the terminal returned fro m the signaling proxy are correct 



12 (Currently Amended) The key distribution method according to claim 1 1, wherein the 
method farther comprises-steps-ef: the terminal sending to the signaling proxy a list of security 
mechanisms supported by the terminal and priority information of each security mechanism, and 
the signaling proxy choosing an appropriate security mechanism for communication according to 
the security mechanisms supported by the terminal and the priority information of each security 
mechanism. 

• r 

13. (Currently Amended) The key distribution method according to any ono of olnims 9 12 clajm 
% 

wherein the registration request message and the registration message are SIP protocol 
registration messages, the registration failure response message is a SIP protocol response 
message, and the registration success response message is a SIP protocol registration request 
success message?: or 

wherein the registration request message compri ses a system restart message and a 
corresponding response menace in me MQ CP protocol the registration failure response 
message and the registration success response message are a notification r equest message and a ^ 
corresponding response message in the MGCP protoc ol, and the registration message comprises. j-^ 
a notification message and a corresponding response message in the MGCP pro tocol; or q 

wherein the re gistration request message compri ses a system service status change O 

message and a corresponding response message in th e H.248 protocol, the registration failure 0 

response message and the registration success resp onse message are an attribute modification ^ 

message and a correspondi n g response message in the H.248 protocol, and the registration — 

message comprises a notification message and a co rresponding response message in the H.248 ±£ 

protocol: or O 

wherein the registration request message is a gatekeeper request m essage in the H.323 
protocol, the registration failure response messag e is a gatekeeper rejection message in the H.323 

CD 
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gQtgggL fee registra r^ messagg is a registration rerpiest message in The H 323 V™^ ™* the 
^ gisrration success response e is a regi stration suc cess message m the H.32J protocol, . 



14. (Currently Amended) The key distribution method according to any ono of claims 9 lfr 
claim IQj 

wherein the registration reouest rnesgagg and the r egistration message are SIP protocol 
re gistration messages, the re g istration failure res ponse message is a SIP protocol response 
message, and the registration success response m essag e i s a SIP p rotocol registration request 
success message: or 

wherein the registration request message comprises a system restart message and a 
corresponding response message in the MGCP protocol, the registration failure response 
message and the registration success response message are a notification request message and a 
corresponding response message in the MGCP protocol, and the registration message comprises 
a notification message and a corresponding response message in the MGCP protocolTioi 

wherein the registration request message compri s es a system service status change 
message and a corresponding response message in th e H.24B protocol the registration failure 
response message and the registration s uccess response message are an attribute modification 
menage and a corresponding response mes sage in the H .248 protocol, and the registration 
message comprises a notification message and a corresponding response message in the H.248 
protocol: or 

wherein the registration request message is a gat ekeeper reouest message in the H.323 protocol, 
the registration failure response message is a gat ekeeper rejection message in the H.323 protocol, 
the registration message is a registration request message in the H.323 protocol, and the 
registration success response message is a registr ation success message in the H.323 protocol. 



15. (Currently Amended) The key distribution method according to anyone of olaimsP 12, 
I claim 11. 

\ wherein the registration reouest message and the r egistration message are SIP protocol 

registration messages, the registration failure respo nse message is a SIP protocol response 
| message, and the registration success response message is a SIP protocol registration request 

j success message: or 

wherein the registration request m essa ge comprises a system restart message and a 
I correspondin g, response message in the MGCP p rotocol, the registration failure response 

message and the registration success response message are a notification request messag e and a 

i 
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Shindig g rgs egnsg mesgagg in the MGCP protoc ol, and the registration message comprises 

„ ^tifictior, me^ f* ™ d » corresponding response message in the MGCP protocol^! 

wherein the registration request message comprises a system service status change 
message and a corresponding response message in the H.248 protocol, the regisfrauon failure 
response message and the registration success response message are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration 
message comprises a notification message and a corresponding response message m the H.248 
protocolTior 

^hRrein the registration request m essa ge is a gatekeeper request, message in the H.323 
protocol, the l ustration failure respons e message is a gatekeeper rejection message in the H.323 
protocol, the registration message is a re g istration request message in the H.323 protocol, and the 
re ^stration success response message is a registration success message in the H.323 protocol. 



16. (Currently Amended) The key distribution method according to any ono of claims 9 claim 
12, 

wherein the r e ff stration request message and the registration message are SIP protocol 
registration messages, the registration failure response messa ge is a SIP protocol response 
message, and the registration success response message is a, S . 1P protocol registration request 
success message: or 

wherein the registration request message comprises a system restart message and a 
corresponding response message in the MGCP proto col, the registration failure response 
message and the registration success re s ponse message are a notification request message and a 
corresponding response message in the MGCP protocol, and the registr ation message comprises 
a notification message and a corresponding respo nse message in the MGCP protocol; or 

wherein the registration request message comprises a system service status change 
message and a corresponding response message in the H.2 48 protocol, the registration failure 
response message and the registration success response m e ssage are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration 
message comprises a notification m essa ge and a correspon ding response message in the H.248 
protocol: or 

wherein the registration request message is a gatekeeper request message in the H.323 
protocol, the registration failure response message is a gatekeeper rejection message in the H.323 
protocol, the registration message is a registration request message in the H.323 protocol, and the 
registration success response message is a registration success message in the H.323 protocol. 

I 

I 
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17. (New) A key distribution system applied in the Next Generation Network comprising: 
a terminal adapted to send a registration request message for a registration; 

a soft switch adapted to receive and forward the authentication request message sent 
from the tenninal for the authentication for the terminal; and 

an authentication center adapted to receive the authentication request message 
forwarded from the soft switch, to authenticate the terminal, to generate a session key for the 
terminal and the soft switch, and to send, upon a successful registration authentication, the 
session key to the soft switch so as to be distributed to the terminal. 

1 8. (New) A key distribution system applied in the Next Generation Network comprising; 

a terminal adapted to send a registration request message for a registration; 

a signaling proxy adapted to enable the terminal to send the registration request 
message therethough; 

a soft switch adapted to receive and forward the authentication request message sent 
from the terminal through the signaling proxy for the authentication for the terminal; and 

an authentication center adapted to receive the authentication request message 
forwarded from the soft switch, to authenticate the terminal, to generate a session key for the 
tenninal and the signaling proxy, and to send, upon a successful registration authentication, the 
session key to the soft switch so as to be distributed through the signaling proxy to the tenninal. 
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